Undertow 2.3.12.Final · io.undertow.protocols.ssl.SNISSLExplorer

Modifier and Type	Class and Description
pack-priv static class	SNISSLExplorer.ExtensionInfo
pack-priv static class	SNISSLExplorer.UnknownServerName

Modifier and Type	Field and Description
public static final int	RECORD_HEADER_SIZE The header size of TLS/SSL records.

Access	Constructor and Description
private	SNISSLExplorer()

Method Summary

Modifier and Type	Method and Description
public static List<SNIServerName>	Returns: the explored capabilities of the SSL/TLS connection explore(ByteBuffer a `ByteBuffer` containing inbound or outbound network data for an SSL/TLS connection. source) Launch and explore the security capabilities from byte buffer.
public static List<SNIServerName>	Returns: the explored capabilities of the SSL/TLS connection explore(byte[] a byte array containing inbound or outbound network data for an SSL/TLS connection. source, int the start offset in array `source` at which the network data is read from. offset, int the maximum number of bytes to read. length) Launch and explore the security capabilities from byte array.
private static List<String>	exploreALPN(ByteBuffer input, int extLen)
private static List<SNIServerName>	exploreClientHello(ByteBuffer input, byte recordMajorVersion, byte recordMinorVersion)
private static SNISSLExplorer.ExtensionInfo	exploreExtensions(ByteBuffer input)
private static List<SNIServerName>	exploreHandshake(ByteBuffer input, byte recordMajorVersion, byte recordMinorVersion, int recordLength)
private static List<SNIServerName>	exploreSNIExt(ByteBuffer input, int extLen)
private static List<SNIServerName>	exploreTLSRecord(ByteBuffer input, byte firstByte, byte secondByte, byte thirdByte)
private static int	getInt16(ByteBuffer input)
private static int	getInt24(ByteBuffer input)
private static int	getInt8(ByteBuffer input)
public static int	Returns: the required size in byte to explore an SSL/TLS connection getRequiredSize(ByteBuffer a `ByteBuffer` containing inbound or outbound network data for an SSL/TLS connection. source) Returns the required number of bytes in the `source` `ByteBuffer` necessary to explore SSL/TLS connection.
public static int	Returns: the required size in byte to explore an SSL/TLS connection getRequiredSize(byte[] a byte array containing inbound or outbound network data for an SSL/TLS connection. source, int the start offset in array `source` at which the network data is read from. offset, int the maximum number of bytes to read. length) Returns the required number of bytes in the `source` byte array necessary to explore SSL/TLS connection.
private static void	ignoreByteVector(ByteBuffer input, int length)
private static void	ignoreByteVector8(ByteBuffer input)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

RECORD_HEADER_SIZE	back to summary
public static final int RECORD_HEADER_SIZE The header size of TLS/SSL records. The value of this constant is 5.

SNISSLExplorer	back to summary
private SNISSLExplorer()

Method Detail

explore back to summary

explore	back to summary
public static List<SNIServerName> explore(ByteBuffer source) throws SSLException Launch and explore the security capabilities from byte buffer. This method tries to parse as few records as possible from `source` byte buffer to get the capabilities of an SSL/TLS connection. Please NOTE that this method must be called before any handshaking occurs. The behavior of this method is not defined in this release if the handshake has begun, or has completed. This method accesses the `source` parameter in read-only mode, and does not update the buffer's properties such as capacity, limit, position, and mark values. Parameters source:ByteBuffer a `ByteBuffer` containing inbound or outbound network data for an SSL/TLS connection. Returns:List<SNIServerName> the explored capabilities of the SSL/TLS connection Exceptions IOException: on network data error BufferUnderflowException: if not enough source bytes available to make a complete exploration.

public static List<SNIServerName> explore(ByteBuffer source) throws SSLException

Launch and explore the security capabilities from byte buffer.

This method tries to parse as few records as possible from source byte buffer to get the capabilities of an SSL/TLS connection.

Please NOTE that this method must be called before any handshaking occurs. The behavior of this method is not defined in this release if the handshake has begun, or has completed.

This method accesses the source parameter in read-only mode, and does not update the buffer's properties such as capacity, limit, position, and mark values.

Parameters

source:ByteBuffer: a ByteBuffer containing inbound or outbound network data for an SSL/TLS connection.

Returns:List<SNIServerName>

the explored capabilities of the SSL/TLS connection

Exceptions

IOException:: on network data error
BufferUnderflowException:: if not enough source bytes available to make a complete exploration.

explore back to summary

explore	back to summary
public static List<SNIServerName> explore(byte[] source, int offset, int length) throws IOException Launch and explore the security capabilities from byte array. Please NOTE that this method must be called before any handshaking occurs. The behavior of this method is not defined in this release if the handshake has begun, or has completed. Once handshake has begun, or has completed, the security capabilities can not and should not be launched with this method. Parameters source:byte[] a byte array containing inbound or outbound network data for an SSL/TLS connection. offset:int the start offset in array `source` at which the network data is read from. length:int the maximum number of bytes to read. Returns:List<SNIServerName> the explored capabilities of the SSL/TLS connection Exceptions IOException: on network data error BufferUnderflowException: if not enough source bytes available to make a complete exploration. See Also `explore(ByteBuffer)`

public static List<SNIServerName> explore(byte[] source, int offset, int length) throws IOException

Launch and explore the security capabilities from byte array.

Please NOTE that this method must be called before any handshaking occurs. The behavior of this method is not defined in this release if the handshake has begun, or has completed. Once handshake has begun, or has completed, the security capabilities can not and should not be launched with this method.

Parameters

source:byte[]: a byte array containing inbound or outbound network data for an SSL/TLS connection.
offset:int: the start offset in array source at which the network data is read from.
length:int: the maximum number of bytes to read.

Returns:List<SNIServerName>

the explored capabilities of the SSL/TLS connection

Exceptions

IOException:: on network data error
BufferUnderflowException:: if not enough source bytes available to make a complete exploration.

See Also

explore(ByteBuffer)

exploreALPN	back to summary
private static List<String> exploreALPN(ByteBuffer input, int extLen) throws SSLException

exploreClientHello	back to summary
private static List<SNIServerName> exploreClientHello(ByteBuffer input, byte recordMajorVersion, byte recordMinorVersion) throws SSLException

exploreExtensions	back to summary
private static SNISSLExplorer.ExtensionInfo exploreExtensions(ByteBuffer input) throws SSLException

exploreHandshake	back to summary
private static List<SNIServerName> exploreHandshake(ByteBuffer input, byte recordMajorVersion, byte recordMinorVersion, int recordLength) throws SSLException

exploreSNIExt	back to summary
private static List<SNIServerName> exploreSNIExt(ByteBuffer input, int extLen) throws SSLException

exploreTLSRecord	back to summary
private static List<SNIServerName> exploreTLSRecord(ByteBuffer input, byte firstByte, byte secondByte, byte thirdByte) throws SSLException

getInt16	back to summary
private static int getInt16(ByteBuffer input)

getInt24	back to summary
private static int getInt24(ByteBuffer input)

getInt8	back to summary
private static int getInt8(ByteBuffer input)

getRequiredSize back to summary

getRequiredSize	back to summary
public static int getRequiredSize(ByteBuffer source) Returns the required number of bytes in the `source` `ByteBuffer` necessary to explore SSL/TLS connection. This method tries to parse as few bytes as possible from `source` byte buffer to get the length of an SSL/TLS record. This method accesses the `source` parameter in read-only mode, and does not update the buffer's properties such as capacity, limit, position, and mark values. Parameters source:ByteBuffer a `ByteBuffer` containing inbound or outbound network data for an SSL/TLS connection. Returns:int the required size in byte to explore an SSL/TLS connection Exceptions BufferUnderflowException: if less than `RECORD_HEADER_SIZE` bytes remaining in `source`

public static int getRequiredSize(ByteBuffer source)

Returns the required number of bytes in the source ByteBuffer necessary to explore SSL/TLS connection.

This method tries to parse as few bytes as possible from source byte buffer to get the length of an SSL/TLS record.

This method accesses the source parameter in read-only mode, and does not update the buffer's properties such as capacity, limit, position, and mark values.

Parameters

source:ByteBuffer: a ByteBuffer containing inbound or outbound network data for an SSL/TLS connection.

Returns:int

the required size in byte to explore an SSL/TLS connection

Exceptions

BufferUnderflowException:: if less than RECORD_HEADER_SIZE bytes remaining in source

getRequiredSize back to summary

getRequiredSize	back to summary
public static int getRequiredSize(byte[] source, int offset, int length) throws IOException Returns the required number of bytes in the `source` byte array necessary to explore SSL/TLS connection. This method tries to parse as few bytes as possible from `source` byte array to get the length of an SSL/TLS record. Parameters source:byte[] a byte array containing inbound or outbound network data for an SSL/TLS connection. offset:int the start offset in array `source` at which the network data is read from. length:int the maximum number of bytes to read. Returns:int the required size in byte to explore an SSL/TLS connection Exceptions BufferUnderflowException: if less than `RECORD_HEADER_SIZE` bytes remaining in `source`

public static int getRequiredSize(byte[] source, int offset, int length) throws IOException

Returns the required number of bytes in the source byte array necessary to explore SSL/TLS connection.

This method tries to parse as few bytes as possible from source byte array to get the length of an SSL/TLS record.

Parameters

source:byte[]: a byte array containing inbound or outbound network data for an SSL/TLS connection.
offset:int: the start offset in array source at which the network data is read from.
length:int: the maximum number of bytes to read.

Returns:int

the required size in byte to explore an SSL/TLS connection

Exceptions

BufferUnderflowException:: if less than RECORD_HEADER_SIZE bytes remaining in source

ignoreByteVector	back to summary
private static void ignoreByteVector(ByteBuffer input, int length)

ignoreByteVector8	back to summary
private static void ignoreByteVector8(ByteBuffer input)

Modifier and Type	Field and Description
pack-priv final List<String>	alpn
pack-priv final List<SNIServerName>	sni

pack-priv final Class SNISSLExplorer

Nested and Inner Type Summary

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail

pack-priv final Class SNISSLExplorer.ExtensionInfo

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

pack-priv final Class SNISSLExplorer.UnknownServerName

Constructor Summary

Method Summary

Constructor Detail